Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
File:                     68daa985947750b9a7aa4090e0e120abbd088f1b.cer (raw, json)
Hash identifier:          BeiPuQr3V223xOfRD552jDtgTO5H1phahM9vDmZ7jFA=
Subject key identifier:   79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F251F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Sep 2021 17:39:15 +0000
Certificate not after:    Mon 19 Aug 2024 17:52:08 +0000
Subordinate resources:    AS: 265849
                          IP: 45.224.228.0/22
                          IP: 2803:ca20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15880694 (0xf251f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 17:39:15 2021 GMT
            Not After : Aug 19 17:52:08 2024 GMT
        Subject: CN=68daa985947750b9a7aa4090e0e120abbd088f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:5e:ce:df:bc:26:d9:e9:ee:72:77:32:7b:
                    b7:fe:f7:ef:da:77:02:8e:d2:5e:8b:19:66:eb:94:
                    51:ee:7b:94:b9:30:4d:52:8a:ae:d9:32:84:dd:78:
                    4a:f3:a8:23:fe:31:f5:b8:01:5d:f2:72:0b:26:05:
                    42:d6:26:cd:a3:06:64:79:24:1b:c0:82:6a:d6:1a:
                    f3:6f:d0:56:18:f9:f3:26:c8:85:cf:96:12:42:76:
                    60:38:17:a2:fe:12:0a:bf:d2:e5:e7:95:f9:8a:d0:
                    f7:42:87:d9:db:ce:89:c4:8a:c8:ca:b0:8b:5c:7f:
                    9c:0d:e7:ad:12:70:d8:9e:14:3d:5e:6b:93:59:cb:
                    f2:29:3c:f5:b3:0b:c9:bd:e6:27:f4:5c:f0:ea:d8:
                    da:22:22:09:58:e8:22:4b:7c:22:31:69:f9:95:8c:
                    79:69:49:8b:2e:8c:aa:87:c1:e9:4b:36:b7:9f:61:
                    2e:13:dc:86:e3:c2:9c:26:c5:36:00:13:9f:67:98:
                    42:24:dd:1d:ab:ef:0c:16:a6:71:e5:85:13:54:9e:
                    da:3a:7b:3e:53:78:07:94:5f:da:e4:82:c7:ac:79:
                    5e:eb:a5:1f:06:b4:df:44:74:d2:e3:e9:5b:52:41:
                    41:9f:35:b9:3a:ea:e7:46:d6:52:fa:cc:00:9f:eb:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.228.0/22
                IPv6:
                  2803:ca20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265849

    Signature Algorithm: sha256WithRSAEncryption
         b3:af:73:8e:55:f2:d9:94:31:bf:45:6e:b1:58:2c:96:b4:a0:
         df:1f:ab:f7:fe:3c:1d:aa:43:ab:d6:00:df:e8:3b:7d:60:00:
         25:46:87:5c:71:98:45:03:d2:3f:ab:b5:48:75:3b:38:27:85:
         d3:5e:cf:df:8d:e8:cb:f7:a0:e8:fe:f9:bc:23:bf:08:da:22:
         6a:6e:f8:c5:2a:c9:97:d7:8a:2a:8e:ca:fc:c2:f3:c4:a1:89:
         00:ad:7e:d2:ab:4f:27:de:af:83:ed:59:64:52:95:73:3e:21:
         d7:11:35:d6:a1:b1:5c:9e:8d:80:0b:2b:1f:d4:37:64:ee:e5:
         82:74:dc:59:81:e5:89:6c:e7:98:ee:b5:62:43:e3:ff:3e:36:
         85:a0:43:b3:67:0b:41:9f:2a:fb:b1:2f:1e:3b:2d:71:4e:c2:
         0e:f2:8b:91:7c:c2:d3:8b:a0:19:58:de:f3:5d:c2:3b:61:b6:
         17:03:c5:f6:9a:f9:c6:7e:68:1c:0b:02:cf:4b:5a:cc:ea:97:
         5f:80:c9:c1:6c:90:86:2c:0c:3c:79:eb:09:91:9e:59:d5:fe:
         50:59:58:63:0e:42:81:f4:09:41:2c:e3:ad:d7:f2:20:9d:9f:
         e4:2c:82:c5:75:13:60:bb:63:45:92:02:46:94:e0:c3:1d:f2:
         0d:83:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----